Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y-WICZbJLSCNlG9ZbUDWHW3osCI.roa
File: y-WICZbJLSCNlG9ZbUDWHW3osCI.roa (raw, json)
Hash identifier: OfOWSz/Swt4rwEToFYJNB2Xe9B0XgcsvJuuZ2NaPIYQ=
Subject key identifier: CB:E5:88:09:96:C9:2D:20:8D:94:6F:59:6D:40:D6:1D:6D:E8:B0:22
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A08632BE5F4544D8F8F6B0AF8672D4598A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y-WICZbJLSCNlG9ZbUDWHW3osCI.roa
Signing time: Wed 09 Sep 2026 12:44:27 +0000
ROA not before: Wed 09 Sep 2026 12:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41075
IP address blocks: 79.172.194.0/23 maxlen: 23
79.172.197.0/24 maxlen: 24
87.229.24.0/24 maxlen: 24
87.229.111.0/24 maxlen: 24
217.113.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:32:be:5f:45:44:d8:f8:f6:b0:af:86:72:d4:59:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Sep 9 12:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbe5880996c92d208d946f596d40d61d6de8b022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:eb:ad:ba:aa:b6:a7:27:34:64:99:e6:0f:
60:dc:df:8f:7a:2c:2f:75:7e:fc:fe:30:2e:0e:3b:
41:bb:f8:0e:97:15:ab:7e:30:45:6e:cc:64:2a:6e:
9d:5d:40:34:2e:6c:21:27:ac:95:b7:96:6e:74:2f:
a9:51:4b:78:9f:d4:8e:b2:d6:92:d5:7e:c9:5e:e8:
29:57:2d:bb:d9:98:bd:12:e1:9c:e2:98:02:67:46:
dd:94:e6:02:22:45:61:c8:97:13:81:e9:46:bd:4e:
72:24:d1:60:ad:85:11:a8:e8:b7:ec:78:c3:16:c6:
cd:fe:0e:b7:f7:6d:61:85:53:73:c8:7d:f6:0f:3f:
3d:b9:c4:75:cc:d9:62:29:a5:54:44:e4:71:2b:1e:
4e:2a:dc:12:84:5c:f9:28:b5:8c:20:a1:14:b1:b8:
91:20:ff:1c:4a:da:89:8b:58:bc:71:48:36:20:01:
96:a3:fd:e4:d0:e2:4f:a3:0d:ca:a6:6c:fd:68:ae:
6f:89:65:76:b8:9f:50:ac:f9:d3:3d:8e:70:f6:40:
84:12:52:38:09:3e:89:4b:73:65:5a:95:25:4c:fd:
e5:47:e8:15:7c:c7:90:fc:d2:ca:93:4b:77:4d:1d:
59:55:37:f1:bf:fa:46:40:e1:5c:a3:bc:9e:33:1b:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:88:09:96:C9:2D:20:8D:94:6F:59:6D:40:D6:1D:6D:E8:B0:22
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/y-WICZbJLSCNlG9ZbUDWHW3osCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.194.0/23
79.172.197.0/24
87.229.24.0/24
87.229.111.0/24
217.113.62.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7c:33:80:6a:e1:65:d7:14:ff:69:b1:a5:fd:2c:50:e8:37:
9c:53:10:3b:0c:50:ca:ad:e5:83:90:d0:e1:b8:23:f3:53:c5:
ed:ad:71:ef:78:2f:2e:4a:85:b8:a2:b8:03:e4:64:54:96:74:
dd:8f:d9:14:45:c1:9d:e9:c4:26:85:9d:57:ff:a6:3b:f7:47:
ce:ce:b0:2e:03:ea:1e:12:75:1c:25:78:a9:f0:19:fc:28:c6:
6e:c9:37:f4:d3:d1:b6:66:1d:c2:e6:c3:ef:ca:3d:24:c5:fb:
e8:af:6e:9c:c7:55:7b:9f:52:5e:f3:7b:0e:18:8c:37:86:92:
11:66:b3:11:39:5c:a2:54:32:25:85:77:20:92:0a:3e:5b:db:
4a:53:83:cd:05:9e:74:1a:24:f4:c7:36:b4:5f:c8:6d:6d:0f:
7d:fb:12:7e:43:3c:5d:26:22:52:57:3e:65:e7:fa:69:60:dd:
27:b5:bd:1a:7d:82:b9:0f:ab:8c:3a:d0:ab:05:ee:a3:af:1a:
1c:40:0c:4e:68:60:d1:fa:96:2a:eb:b4:11:52:e2:20:dc:a6:
1b:f9:bc:56:ef:b1:5b:3b:8c:81:38:3c:a0:79:b7:c7:78:9c:
d5:82:da:6e:41:1d:96:e8:f9:4d:c8:4c:41:50:ee:dd:6a:89:
b0:f0:f1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:54 2026 by rpki-client